Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Zope management interface vulnerable to stored cross site scripting via the title property
Vulnerability Description
Zope is an open-source web application server. The title property, available on most Zope objects, can be used to store script code that is executed while viewing the affected object in the Zope Management Interface (ZMI). All versions of Zope 4 and Zope 5 are affected. Patches will be released with Zope versions 4.8.11 and 5.8.6.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Zope 跨站脚本漏洞
Vulnerability Description
Zope是Zope社区的一套使用Python语言编写的、面向对象的开源Web应用服务器。 Zope存在跨站脚本漏洞，该漏洞源于Zope管理界面（ZMI）的title属性存在存储型跨站脚本（XSS）漏洞。受影响的产品和版本：Zope 4.8.11之前版本， 5.8.6之前版本。
CVSS Information
N/A
Vulnerability Type
N/A